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ABSTRACT 


This article looks at corporate agility from indicators such as sensing 
agility, decision making agility, acting agility or practice. It went on 
to review what cyber security awareness entails by stating some of 
the most possible threat that people encountered on a daily bases. The 
article identify poor management of cyber security solutions provided 
by modern internet security experts in the form of difficulty of 
tracing the cyber-crime attackers, limited cybercrime laws, and 
limited IT security knowledge among internet users as the problems 
that the study addresses. Theory of protection motivation was used 
primarily to explain cyber security awareness, and how and when a 
user adopts adaptive behaviors. The article conclude that cyber 
security awareness is more important now than it has ever been 
before and that threats to personal and corporate information are 
increasing and identities are getting stolen every day. The article 
recommend that government, deposit money banks, users, mass 
media and manager should introduce and enforce cybercrime laws, 
train ,offers advices and create more awareness among their staff and 
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clients of the organization on the need to be aware of internet threat 


and be careful in their dealings on a daily bases. 
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1. INTRODUCTION 

Deposit money banks in Nigeria on a daily bases are 
working hard to identify with their counterparts 
globally; some in their desire to attain international 
recognitions has resolve to station their offices 
outside the shore of Nigeria. While others has 
resolves to the use of the internet facilities or 
technology as a basic medium for rendering their 
services to members of the public or getting 
proximate to their customers. The desire to get to its 
customers with ease came as result of the drastic 
increase in information technology in the past 
decades and with massive global rates of internet 
consumption by individuals and organizations 
ranging from academia and government to industrial 
sectors (Aloul, (2012; Jalali, Siegel & Madnick, 2019 ; 
Lee, Chong &Ramayah, 2017). 


As such, it is important to note that over the time past 
and in this present era, information technology has 
actually made significant impacts on the operations of 
this deposit money banks and is still going to change 
the directions of doing things in the nearest future. 
While some banks now develop apps that can be 


Attribution License (CC BY 4.0) 


(http://creativecommons.org/licenses/by/4.0) 


downloaded on to mobile devices, others have come 
up with devices that allows for quick transaction 
delivery. All these the deposit money banks does to 
ensure that they remain relevant in the ever 
competitive financial industry (Zwilling, Klien, 
Lesjak, Wiechetek, Cetin &Basim, 2020); where 
digital applications have continue to transform daily 
life and facilitating diverse lifestyles in many other 
areas. 


Furthermore, Zwillinget al., (2020) emphases that the 
ease of technology usage as well as the increased 
demand for online connectivity (in education, retail, 
tourism, and even autonomous vehicles) has 
expanded opportunities for internet usage on a global 
scale. Indeed, some of these uses include sending 
money to people at different location with ease, 
payment for bills, ease of wire transfer for 
transactions, surfing the web to know what new ideas 
our competitors has been doing, utilizing search 
engines to find desired content, assisting 
recommender systems in the form of decision support 
tools and using social media to name only a few 
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(Zwillinger al., 2020). Notwithstanding the lots of 
benefits that are associated with the adoption of such 
device in banking transactions and other services 
rendered by the deposit money banks, many 
organizations, individuals and institutions of business 
has suffered greatly from all manner of internet threat 
that has come as a result of lack of awareness of the 
various antics of dubious elements in the society 
(Choi & Yi, 2009). In fact, they often fail to possess 
the minimum required knowledge to protect their 
computing devices. In worst case scenarios, deposit 
money banks, its customers and individuals suffer 
from total lack cyber hazard awareness. Hence, their 
readiness to utilize protective cyber security measures 
is non-existent. 


Cyber hazards are the work of “bad hackers” 
(otherwise known as “black hats’’), who act on their 
own or within an organized criminal group to commit 
cyber-crime. In both cases, their intention is to engage 
in cyber-crime in any of its various forms, ranging 
from violation of individual privacy to identity theft 
and credit card fraud(Zwillinger al., 2020). Cyber- 
criminals use malicious software and hacking tools to 
sabotage computers, mobile devices, and 
communication network infrastructure, including 
cyber security protection tool disruption (Abawajy, 
2014). While protective tools are generally installed 
on computers and in infrastructure, studies show that 
they do not completely mitigate cyber security 
breaches (Funnel, Jusoh&Katsabas, 2006; Parsons, 
McCormac, Butavicius, Pattinson, &Jerram, 2014; 
Schultz, 2005). This is because the weakest link in the 
cyber security chain remains human error (Anwar, 
He, Ash, Yuan, Li &Xu, 2017; Vance, 
Siponen&Pahnila, 2012; Schneier, 2004). 
Organizations have come to recognize that behaviors 
deriving from the human factor are responsible for 
cyber security flaws and may pose a liability for 
information security (Sasse and Flechais, 2005). 


In view of these threats and weaknesses in terms of 
human errors, deposit money banks have embraced 
and have continue to emphases the need for 
individuals within and outside the banks to develop 
resistance to the criminal intents of cyber-crime 
organizations and individuals; as these organizations 
and individuals makes use of their human weaknesses 
to perpetuate their crime on a daily bases. Also, Since 
human mind capabilities are limited in terms of 
grasping important changes that take place in the 
environment surrounding it, so has the current 
business environment for any organization in the 
world become complicated and highly dynamic for 
them to comprehend (Zain et al., 2005). Therefore, it 
has become necessary that organizations in dire need 


to secure it current and future goals of customer 
satisfaction, has stressed the need for individuals 
within and outside of the deposit money banks to 
develop a sensing agility, decision-making, and 
agility in carrying out work _ properly 
(Markos&Sridevi, 2010; Warr&Inceoglu, 2012); by 
being conscious of cyber-crime alert or any other 
devices that is being used to defraud them. 


Apart from being able to resist these criminal 
elements tactics, the issue of agility or corporate 
agility should become the watch words of the modern 
organization. Corporate agility is one of the methods 
for responding to changes and revolutionary factors 
that affects the smooth running of business. Agility 
provides the organization with the possibility of quick 
response and compatibility with environment and 
allows the organization to improve its efficiency 
(Yeganegi&Azar, 2012). Corporate agility has great 
impacts in the life of the organization as it provides 
personnel with knowledge, high skills, restructuring 
and organizational processes, employing new 
technology (Sherehiy, 2008). Corporate agility refers 
to organizations’ ability to thrive by sensing and 
responding to environmental changes which has 
become critically important nowadays when the 
business environment is getting highly competitive 
and turbulent. It is regarded as a key business factor 
and a _ potential enabler to  organization’s 
competitiveness (Mathiassen& Pries-Heje, 2006) 


Regardless of the different scholarly works that has 
been done on the issue of firm agility; research on 
cyber security awareness and corporate agility in 
deposit money banks are few. Rather research on 
organizational agility is emerging more in the 
information systems field (Izzaet al., 2008) due to the 
extensive reliance of contemporary organizations on 
information in general and information system in 
particular. As such, the problem that this article 
addresses is the poor management of cyber security 
solutions provided by modern internet security 
experts which exhibits itself in the form of difficulty 
of tracing the attackers, limited cybercrime laws, and 
limited IT security knowledge among internet users. 
For example, in May 2017 the WannaCry ransom 
ware attack—a type ofmalware that blocks access to 
computer systems until a ransom is paid—affected 
companies worldwide, even though a patch for the 
exploited Windows vulnerabilities had been made 
available by Microsoft months earlier in March 2017 
(Microsoft, 2017). 


2. Literature Review 
2.1. Corporate Agility 
The concept of agility has been discussed by so many 
researchers differently. Agility was coined in a 
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manufacturing context-particularly in relation to 
flexible manufacturing systems (Christopher 
&Towill, 2001). Agility refers to the proactive 
responses to changes (Bessanter al., 2001). Agility 
can also be referred to the use of changes as inherent 
opportunities in turbulent environment (Sharifi& 
Zhang, 2001). Furthermore, agility is the ability to 
survive and progress in the variable and unpredictable 
environment (Dove, 2001). Sherehiy, (2008) defined 
the process of agility in terms of the capabilities 
necessary to achieve light movement in the 
organization. Agility is the ability to respond to 
unpredictable changes with quick response and 
profitability (Erande&Verma, 2008). Agility is an 
organizational ability to react quickly and effectively 
to an environment which can change radically 
(Janssen, 2010). Agility refers to the ability of rapid 
and easy movement and rapid thinking with a 
thoughtful method. Agility can be defined as 
swiftness and quick response of a harmonious group 
to the changes made by the environment surrounding 
them in order to reach a goal (Yeganegi&Azar, 2012). 


Corporate agility is the organization’s ability to work 
comfortably in a quickly and consistently changing 
and fragmented global market environment, through 
producing high quality and effective performance 
(Tsourveloudis& Valavanis, 2002). Corporate agility 
enables the organization to carry out a series of 
specific tasks successfully, in addition to managing 
the opportunities and risks in the business activities 
effectively (Ardichvileet al., 2003). Corporate agility 
is not only “flexible” to cater for predictable changes 
but also is able to respond and adapt to unpredictable 
changes quickly and efficiently (Oosterhouter al., 
2006). From the process-based perspective, corporate 
agility is a set of processes that allow an organization 
to sense changes and respond efficiently and 
effectively in timely and cost-effective manner in the 
internal and external environments. Sensing refers to 
an organization’s ability to detect, capture and 
interpret organizational opportunities (Seo& Paz 
2008). Responding represents an organizational 
ability to mobilize and transform resources to react to 
the opportunities that it senses (Gattikerer al., 2005; 
Oosterhoutert al., 2006). These two capabilities must 
be aligned to optimally obtain corporate agility 
(Overbyet al., 2006). Corporate agility is a proactive 
management strategy that aims at maintaining the 
organization’s resources and achieving the desires of 
customers in a timely manner (Hitter al., 2007). 
Corporate agility is the organizational capacity to 
sensor response successfully to the opportunities and 
threats in the market in a timely manner (Overbyet 
al., 2006). Corporate agility is a _ proactive 
management strategy that aims at maintaining the 


organization’s resources and achieving the desires of 
customers in a timely manner (Hitter al., 2007). The 
three indicators popularized by Park (2011) were 
adopted for this article. These indicators are sensing 
agility, decision making agility and acting agility/ 
practice. 


Sensing Agility 

Sensing agility is the organizational capacity to 
inspect and monitor events and changes in the 
surrounding environment (customer preferences 
changes, the movements of the new competitors, new 
technology) in a timely manner (Park, 2011). The task 
of sensing means the strategic monitoring of 
environmental events that could have an impact on 
organizational strategy, competitive work, and future 
performance, including several activities such as 
access to information related to the events which 
show environmental change, on the one hand, and 
getting rid of the trivial information, on the other 
hand, in light of predetermined foundations and rules. 


Decision-Making Agility 

Decision-making agility process is the ability to 
collect, accumulate, restructure and evaluate relevant 
information according to a variety of sources to 
explain the implications of the business without 
delay, and to identify opportunities and threats based 
on the interpretation of events, along with the 
development of action plans, which direct the 
reconfiguration of resources and the development of 
new competitive procedures. The decision-making 
task consists of several interrelated activities, which 
explain many events and identify opportunities and 
threats in the surrounding environment. The task of 
decision-making focuses on collecting information 
from multiple and diverse sources in order to 
understand the implications of their work. The task of 
decision-making seeks to capture the utmost 
opportunities and minimize the impact of threats on 
the life of the organization (Houghton et al., 2004). 


Acting Agility/Practicing 

The acting task consists of a set of activities for re- 
assembling organizational resources and modifying 
business processes on the basis of the principles of 
work resulting from the task of decision-making in 
order to address the change that occurs in the 
surrounding environment (Eisenhardt& Martin, 
2000). Organizations can change the business 
processes by various procedures and resources, 
redesigning the organizational structure of the 
organization. 


2.2. Cyber Security Awareness 

The information security community has come to 
realize that the weakest link in a cyber-security chain 
is human (Sasse, 2005). To develop effective cyber- 
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security training programs for employees in the 
workplace, it is necessary to understand the security 
behavior of both men and women, and the similarities 
and differences of their security behaviors. As 
Hackers are continuously identifying new means of 
stealing information. Unfortunately, the presence of 
“uneducated” users in an organization makes them an 
easy target for hackers and vulnerable to privacy 
attacks (Khattak, Manan, and Sulaiman, 2011). User 
education and training is a must to combat IT security 
threats. Users should not only learn the material but 
they should also apply it in their daily life. This is not 
a simple task to achieve and not the sole 
responsibility of the user or the organization. Many 
groups have to be involved to produce an IT security- 
aware resident. 


There are multiple different schemes that have been 
happening recently that are associated with Internet 
usage. Some of these scams involve hackers cracking 
passwords to get access to personal information and 
criminals using phishing techniques to gather 
information that they can use to steal individual’s 
identities (Jansson& von Solms, 2013).The internet is 
not a secured space. It is an area where there currently 
are not many regulations. It is where anyone can put 
up, take down, or gather as much information as they 
want (Hall, 2012). 


Cyber security is becoming an increasingly talked 
about topic. With more and more people making their 
personal information available online than ever 
before, it is becoming a hacker’s paradise. However, 
most individuals do not know about all of these scams 
and are unaware when they are happening to them. 
Because of this, people do not know how to protect 
themselves and how to stop being a target. Cyber 
security needs to be more common knowledge and 
education needs to be more readily available. It is 
important for us to help educate individuals on what 
they can do to stop and prevent potential cyber 
security attacks. It is also especially important that 
our customers and staff to be able to recognize 
potential threats. Majority of people are not only 
unaware that cyber threats are real, but are also 
unaware of what to do about them. Most people just 
hope or assume that identity theft and phishing 
attacks are not going to happen to them. But, making 
society aware that even the smallest tasks can pose 
potential threats is crucial for their safety. 


Awareness is the first step in reducing the number of 
identity thefts and personal information threats. 
Individuals believe that if they have a unique 
password then they are protecting themselves enough 
that they do not have to worry about cyber security 
threats (McCrohan, Engel, & Harvey, 2010). While 


this is a good first step, and it is strongly 
recommended to create unique passwords, it is not 
enough to keep information private. Most hackers 
have the technology and knowledge to know how to 
decrypt these passwords or bypass them completely. 
Each day that our technology is improving is another 
day that hackers are figuring out how to crack that 
technology. 


Likewise, much of the population believes that 
installing virus protection or spy software onto their 
computers is enough. They think that this software is 
going to save them from ever being hacked or having 
their information stolen (McCrohan, Engel, & 
Harvey, 2010). This is also simply not true. We need 
to change this way of thinking by helping society 
recognize the signs of the potential threats and risks. 
We then need to hand them the information that they 
need to keep themselves safe and protected. Some of 
the signs that users need to be aware of that usually 
indicate a phishing attempt are: words being 
misspelled, a certain degree of urgency or 
“deadlines”, fake names and web links, and a request 
for personal information (Lungu&Tabusca, 2010). 


3. Cyber Security Awareness and Corporate 
Agility 
Hearth and Rao (2009) secure management of 
information systems is crucially important in 
information intensive organizations. Although most 
organizations have long been using security 
technologies, it is well known that technology tools 
alone are not sufficient. Thus, the area of end-user 
security behaviors in organizations has gained an 
increased attention. In information security observing 
end-user security behaviors is challenging. Moreover, 
recent studies have shown that the end users have 
divergent security views. The inability to monitor 
employee IT security behaviors and divergent views 
regarding security policies, in our view, provide a 
setting where the principal agent paradigm applies. In 
this paper, we develop and test a theoretical model of 
the incentive effects of penalties, pressures and 
perceived effectiveness of employee actions that 
enhances our understanding of employee compliance 
to information security policies. Based on 312 
employee responses from 77 organizations, we 
empirically validate and test the model. Our findings 
suggest that security behaviors can be influenced by 
both intrinsic and extrinsic motivators. Pressures 
exerted by subjective norms and peer behaviors 
influence employee information security behaviors. 
Intrinsic motivation of employee perceived 
effectiveness of their actions was also found to play 
an important role in security policy compliance 
intentions. In analyzing the penalties, certainty of 
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detection was found to be significant while 
surprisingly, severity of punishment was found to 
have a negative effect on security behavior intentions. 
We discuss the implications of our findings for theory 
and practice. 


According to Vance, Siponen and Pahnila (2012) 
employees’ failure to comply with IS security 
procedures is a key concern for organizations today. 
A number of socio-cognitive theories have been used 
to explain this. However, prior studies have not 
examined the influence of past and automatic 
behavior on employee decisions to comply. This is an 
important omission because past behavior has been 
assumed to strongly affect decision-making. To 
address this gap, we integrated habit (a routinized 
form of past behavior) with Protection Motivation 
Theory (PMT), to explain compliance. An empirical 
test showed that habitual IS security compliance 
strongly reinforced the cognitive processes theorized 
by PMT, as well as employee intention for future 
compliance. We also found that nearly all 
components of PMT significantly impacted employee 
intention to comply with IS security policies. 
Together, these results highlighted the importance of 
addressing employees’ past and automatic behavior in 
order to improve compliance. 


Mohamed and Ahmad (2012) in their study on 
information privacy concern, antecedents and privacy 
use in social network sites: evidence from Malaysia, 
the research aims at gaining insights into information 
privacy concerns, its antecedents and privacy measure 
use in social networking sites. The Social Cognitive, 
Protection Motivation theories and gender factor were 
used as a basis to develop and confirm a research 
model. Using a cross-sectional survey design and 
cluster sampling technique, four-hundred thirteen 
questionnaires were distributed to undergraduates at a 
public Malaysian university; three-hundred forty were 
included in analyses. Data was analyzed using 
structural equation modeling technique. Results 
suggest that in order of importance only perceived 
severity, self-efficacy, perceived vulnerability, and 
gender are antecedents of information privacy 
concerns with social networking sites; response 
efficacy and rewards were not significant antecedents 
contrary to many past findings in the literature that 
used Social Cognitive and Protection Motivation 
Theory as a theoretical basis. Information privacy 
concerns explain privacy measure use in social 
networking sites. The implications of these results 
and study limitations are discussed. 


Ng, Kankanhalli and Xu (2009) studying user’s 
computer security, a health belief perspective. The 
damage due to computer security incidents is 


motivating organizations to adopt protective 
mechanisms. While technological controls are 
necessary, computer security also depends on 
individual's security behavior. It is thus important to 
investigate what influences a user to practice 
computer security. This study uses the Health Belief 
Model, adapted from the healthcare literature, to 
study users' computer security behavior. The model 
was validated using survey data from 134 employees. 
Results show that perceived susceptibility, perceived 
benefits, and self-efficacy are determinants of email 
related security behavior. Perceived severity 
moderates the effects of perceived benefits, general 
security orientation, cues to action, and self-efficacy 
on security behavior. 


4. Conclusions and Recommendations 

Cyber security awareness is more important now than 
it has ever been before. Threats to personal and 
corporate information are increasing and identities are 
getting stolen every day. Making individuals and 
corporation aware of this is the first step. The second 
step is giving individuals and the corporate entity the 
tools and knowledge that they need to protect 
themselves. Based on these conclusions, the article 
recommends that: 


A. Governments should produce cybercrime laws 
and enforce them. They should also work closely 
with other governments since many attacks can be 
conducted from abroad. 


B. Deposit money banks should have trained 
computer emergency response teams (CERT) that 
are dedicated to the detection, prevention, and 
response of cyber security incidents. 


C. Media houses should continuously post IT 
security advices, report IT security incidents, and 
the penalty that the attackers got this will put fear 
in the mind of those thinking of such an act. 


D. Users (staff and customers of these deposit money 
banks Apps and other software) should train 
themselves by constantly reading magazines, 
books and online articles on IT security threats 
and what to do to protect themselves from such 
threats. 


E. Telecommunication companies (ISPs) should 
offer advices on how to use the internet safely or 
configure any internet device securely. 


F. Managers of deposit money banks should offer 
security training to its employees and clients. This 
could be online or onsite training or a 
combination of both. 
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